Re: Marc: use SPF to prevent backscatter? Was RE: [AMaViS-user] Q about mail proxy servers and setups

2007-09-24 Thread Clifton Royston
out of your hands, you can at least reduce the volume of spurious bounces. All IMHO, naturally -- Clifton -- Clifton Royston -- [EMAIL PROTECTED] / [EMAIL PROTECTED] President - I and I Computing * http://www.iandicomputing.com/ Custom programming, network design, systems and network consulting services

Re: [AMaViS-user] Q about mail proxy servers and setups

2007-09-23 Thread Clifton Royston
xy filter is inadequate to shield the corporation from spam, unfortunately you are left with a relatively limited subset of today's antispam features which you can actually use on the inside. In the end, the corporation has to live with (or die with) the choice of filtering technology it ha

Re: URIXBL?

2006-10-30 Thread Clifton Royston
ectors, and even DNS servers, on dynamic addressed machines. If it ever gets to the point where URI spam hosts are being blocked too effectively for them, they might switch this way and then this would become a useful test - so it's not a bad thing to have thought about it in advance. --

Re: Postfix setting? or Spam Assassin?

2006-10-29 Thread Clifton Royston
in particular, it needs to pass all of the recipients to the reinjection step. -- Clifton P.S. Please don't crosspost to lists with disjoint memberships; I'm trimming the postfix list as I'm not currently subscribed. -- Clifton Royston -- [EMAIL PROTECTED] / [EMAIL PROTECTED]

Re: Confused about getting plugins to work.

2006-10-28 Thread Clifton Royston
t;discover" mode on Razor yet? You need to manually run that (as the user and with the home directory Razor will be running as, in your case amavis) for it to latch onto some servers to use. Check the man pages; I forget which one covers this. It's a bit terse. -- Clifton -- Cl

Re: [OT] Filter Server Specs

2006-10-27 Thread Clifton Royston
ilities include CentOS, Gentoo, Debian. I'm not a big Linux head, others may have stronger opinions on that front. -- Clifton -- Clifton Royston -- [EMAIL PROTECTED] / [EMAIL PROTECTED] President - I and I Computing * http://www.iandicomputing.com/ Custom programming, network design, systems and network consulting services

Re: Spam using local newspapers

2006-10-24 Thread Clifton Royston
t as well. Based on both industry and IP local. I've noticed that the phishes I get are clearly targeted using geolocator data; it's not surprising they're starting to target Bayes as well. -- Clifton -- Clifton Royston -- [EMAIL PROTECTED] / [EMAIL PROTECTED] Pre

Re: sare top choices

2006-10-19 Thread Clifton Royston
n running that one for at least a couple years. Just adding the "stocks" one now, as it's the main spam category that's getting through at the moment. I'd view both those, at least, as essential. -- Clifton -- Clifton Royston -- [EMAIL PROTECTED] / [EMAI

FreeBSD ports and 3.1.7 (Was Re: Should I upgrade to 3.1.6?)

2006-10-18 Thread Clifton Royston
t yourself. It took me about 5-10 minutes earlier today when I got tired of waiting for ports to catch up. I'm about to start testing now. It's not even that hard to create your own new local ports under ports/local, following the FreeBSD Porter's Handbook, even if you don't

Re: Joe Blow wrote: Spam

2006-10-18 Thread Clifton Royston
. > > Inconsistent on the network checks. For instance, my personal e-mail > got 4 of these but 2 more were caught by network checks. They are adding new PCs to the bot-nets used for spam faster than the DNSBL operators can update the lists. -- Clifton -- Clifton Royston -- [

Re: Increase in Spam

2006-10-17 Thread Clifton Royston
raphics/libungif, graphics/ImageMagick, and graphics/gocr, and all their dependencies, I think that'll fetch everything. -- Clifton -- Clifton Royston -- [EMAIL PROTECTED] / [EMAIL PROTECTED] President - I and I Computing * http://www.iandicomputing.com/ Custom programming, networ

Re: RBL checks not working

2006-10-17 Thread Clifton Royston
other DNS resolution would work properly. -- Clifton -- Clifton Royston -- [EMAIL PROTECTED] / [EMAIL PROTECTED] President - I and I Computing * http://www.iandicomputing.com/ Custom programming, network design, systems and network consulting services

Re: Increase in Spam

2006-10-13 Thread Clifton Royston
erver with no previous graphics-related packages, I had to build and install something like 17 or 18 new packages. Preliminary testing says it works well though, though I haven't yet moved it into production. -- Clifton -- Clifton Royston -- [EMAIL PROTECTED] / [EMAIL PROTECTED]

Re: Increase in Spam

2006-10-13 Thread Clifton Royston
SARE_GIF_ATTACH 2.5 2.5 2.5 2.5 > score SARE_GIF_STOX 2.5 2.5 2.5 2.5 -- Clifton Royston -- [EMAIL PROTECTED] / [EMAIL PROTECTED] President - I and I Computing * http://www.iandicomputing.com/ Custom programming, network design, systems and network consulting services

Re: Handling profanity in Spam with fuzzy matching?

2006-10-12 Thread Clifton Royston
ll for me; not perfect. -- Clifton -- Clifton Royston -- [EMAIL PROTECTED] / [EMAIL PROTECTED] President - I and I Computing * http://www.iandicomputing.com/ Custom programming, network design, systems and network consulting services

Re: PRIORITY_NO_NAME FP on newegg shipping notice

2006-10-11 Thread Clifton Royston
o look at later. -- Clifton -- Clifton Royston -- [EMAIL PROTECTED] / [EMAIL PROTECTED] President - I and I Computing * http://www.iandicomputing.com/ Custom programming, network design, systems and network consulting services

Re: Bayesing Filtering needs to be rewritten

2006-10-11 Thread Clifton Royston
ail has an attachment of such and such a type, then do not > > autolearn and/or send it to other conditionals > > I've suggested a tflag like "suppress_autolearn" before. Maybe there's > something similar slated for 3.2.0? IMHO this is an excellent idea.

Re: Ideas

2006-10-10 Thread Clifton Royston
back a scored copy of a mail is fine in principle, but you need to work out something where it forwards it to a fixed address at your server or something of the kind. That way if it gets spammed, it harms nobody but your server. -- Clifton -- Clifton Royston -- [EMAIL PROTECTED] / [EMAI

Are others getting triple copies of all posts to [EMAIL PROTECTED]

2006-10-09 Thread Clifton Royston
I am, just wondering if others are having the same problem. -- Clifton -- Clifton Royston -- [EMAIL PROTECTED] / [EMAIL PROTECTED] President - I and I Computing * http://www.iandicomputing.com/ Custom programming, network design, systems and network consulting services

Re: First Received Header only

2006-10-08 Thread Clifton Royston
On Sun, Oct 08, 2006 at 02:53:47PM -0700, John Rudd wrote: > Clifton Royston wrote: > > Also, IIRC there's already a set of rules closely related to what > >you're asking, so you can base it off those. Try looking for the > >definition of HELO_DYNAMIC_IPAD

Re: First Received Header only

2006-10-08 Thread Clifton Royston
der. Also, IIRC there's already a set of rules closely related to what you're asking, so you can base it off those. Try looking for the definition of HELO_DYNAMIC_IPADDR and related rules. -- Clifton -- Clifton Royston -- [EMAIL PROTECTED] / [EMAIL PROTE

Re: What's the best method to use SA?

2006-10-04 Thread Clifton Royston
visd-new runs as a daemon, so Spamassassin only has to be compiled in Perl once instead of once per incoming message. > Anyone who uses above solutions? *Lots* of mailservers use amavisd-new, including many ISPs and 3rd party mail providers, FWIW. -- Clifton -- Clifton Royston --

HELO test rule-writing questions

2006-10-03 Thread Clifton Royston
lo=\[\d+\.\d+\.\d+\.\d+\][^\]]+ auth= /i I want to distinguish this case from a bare IP address (invalid!) which I also want to look at and score: # [60.222.35.88] header HELO_BARE_IP X-Spam-Relays-Untrusted =~ /^[^\]]+ helo=\d+\.\d+\.\d+\.\d+[^\]]+ auth= /i -- Clifton -- Clifton Roys